This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/ryr3m4Zwdzrwhy1VJMY9q7Nd274.roa File: ryr3m4Zwdzrwhy1VJMY9q7Nd274.roa (raw, json) Hash identifier: GE/9jCmc5lF87tDmPaGk9SCOllCN178iR70DGke83Xs= Subject key identifier: AF:2A:F7:9B:86:70:77:3A:F0:87:2D:55:24:C6:3D:AB:B3:5D:DB:BE Certificate issuer: /CN=dbb653bbd1704c47bada62ab6ce3502307f244b6 Certificate serial: 019B7910ACC31E213628DF6A11AAD2857C01 Authority key identifier: DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/ryr3m4Zwdzrwhy1VJMY9q7Nd274.roa Signing time: Thu 01 Jan 2026 10:18:14 +0000 ROA not before: Thu 01 Jan 2026 10:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8412 IP address blocks: 193.186.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.crl rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ac:c3:1e:21:36:28:df:6a:11:aa:d2:85:7c:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbb653bbd1704c47bada62ab6ce3502307f244b6 Validity Not Before: Jan 1 10:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af2af79b8670773af0872d5524c63dabb35ddbbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bb:62:ae:d4:77:04:d9:b6:52:60:96:b1:08: 22:91:2e:47:cc:02:5b:fa:a9:f1:7e:9d:24:c9:6c: a6:92:40:74:b5:cf:83:2f:a0:dc:64:33:0f:0c:20: 61:2f:47:e1:84:88:19:ba:0a:a1:b6:78:5d:48:7d: 0a:a4:35:c1:50:95:ec:67:f1:15:68:21:76:d8:d0: 43:8a:42:63:95:2b:e2:2d:16:c7:15:58:78:d4:43: 04:06:89:b9:70:a6:aa:16:df:76:7f:76:de:a2:ec: c5:04:f4:e0:da:25:9c:0c:95:33:f8:5d:13:04:cd: a8:41:34:92:da:02:1b:7e:42:7c:13:d9:8a:d5:c1: 5a:f2:15:57:2a:af:18:10:72:5b:43:ed:3e:d6:b5: d9:62:e3:e1:f7:19:93:3a:4c:3d:60:9f:90:a5:c3: da:fa:a0:9f:12:9a:20:65:86:90:c1:0b:9c:98:c5: 15:a1:da:2a:16:2d:a8:0c:8a:16:01:f2:1b:64:9d: 2c:e1:d8:6e:5b:00:4d:ef:18:0c:89:66:d5:8d:3f: e1:ec:89:67:42:2e:9e:75:f8:14:d4:1f:54:07:ec: 38:2b:ff:5e:1d:49:69:77:44:da:3c:c9:88:e4:62: 80:6c:35:ec:f5:c1:52:80:5e:dd:7d:b9:f3:80:e2: 8d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2A:F7:9B:86:70:77:3A:F0:87:2D:55:24:C6:3D:AB:B3:5D:DB:BE X509v3 Authority Key Identifier: keyid:DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/ryr3m4Zwdzrwhy1VJMY9q7Nd274.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.186.86.0/23 Signature Algorithm: sha256WithRSAEncryption 81:19:7e:81:8c:9e:37:ea:f4:9d:40:ef:44:da:5d:c5:ab:91: fc:73:64:90:f3:20:41:3a:e6:ee:11:e7:0d:b8:79:ed:99:a5: 94:09:2a:8a:8f:e6:81:04:c6:d9:de:69:f0:ed:b8:f4:8c:80: 74:d8:c0:03:a8:28:27:16:0b:11:83:2c:ab:2b:8f:cf:18:b9: 2b:91:c7:e5:4f:56:21:78:74:41:d5:51:41:ba:0f:91:c7:27: 5e:c1:fe:bd:f1:0c:bf:8a:aa:64:08:af:c0:58:23:34:c0:4d: ab:ac:40:2c:f2:5e:72:44:3e:02:29:b6:52:51:6f:4d:14:39: 8e:ec:fb:72:85:d2:b5:0c:f3:d4:ba:7e:ef:d0:25:e0:18:c4: 74:96:d3:e2:78:77:9c:6e:ff:64:7e:8e:18:33:7c:9c:b0:2e: 2c:37:b9:20:b3:76:37:bf:36:6a:fd:48:f9:58:7c:ed:83:43: be:94:d0:0d:66:21:ee:7d:7b:b1:c6:24:47:a0:92:bb:0b:2a: 59:81:86:54:07:52:e0:1c:01:b6:db:93:fb:6d:f8:a2:41:2b: d9:2f:84:2e:5e:35:25:63:bd:6d:67:3e:0e:bd:a2:78:9c:d5: 50:49:bd:6c:1e:cd:0f:7e:48:4f:1d:cb:3b:62:51:cf:a3:9c: 95:ef:3f:77 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EKzDHiE2KN9qEarShXwBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYjY1M2JiZDE3MDRjNDdiYWRhNjJhYjZjZTM1MDIzMDdm MjQ0YjYwHhcNMjYwMTAxMTAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjJhZjc5Yjg2NzA3NzNhZjA4NzJkNTUyNGM2M2RhYmIzNWRkYmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrtirtR3BNm2UmCWsQgikS5HzAJb +qnxfp0kyWymkkB0tc+DL6DcZDMPDCBhL0fhhIgZugqhtnhdSH0KpDXBUJXsZ/EV aCF22NBDikJjlSviLRbHFVh41EMEBom5cKaqFt92f3beouzFBPTg2iWcDJUz+F0T BM2oQTSS2gIbfkJ8E9mK1cFa8hVXKq8YEHJbQ+0+1rXZYuPh9xmTOkw9YJ+QpcPa +qCfEpogZYaQwQucmMUVodoqFi2oDIoWAfIbZJ0s4dhuWwBN7xgMiWbVjT/h7Iln Qi6edfgU1B9UB+w4K/9eHUlpd0TaPMmI5GKAbDXs9cFSgF7dfbnzgOKNXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK8q95uGcHc68IctVSTGPauzXdu+MB8GA1UdIwQY MBaAFNu2U7vRcExHutpiq2zjUCMH8kS2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjdaVHU5RndURWU2Mm1LcmJPTlFJd2Z5UkxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC84MDYwZGYtYTZmNy00MTY2LWE5Mjkt YTk4MGJlZDMzYWIwLzEvcnlyM200WndkenJ3aHkxVkpNWTlxN05kMjc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC84MDYwZGYtYTZmNy00MTY2LWE5MjktYTk4MGJlZDMzYWIw LzEvMjdaVHU5RndURWU2Mm1LcmJPTlFJd2Z5UkxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwbpWMA0G CSqGSIb3DQEBCwUAA4IBAQCBGX6BjJ436vSdQO9E2l3Fq5H8c2SQ8yBBOubuEecN uHntmaWUCSqKj+aBBMbZ3mnw7bj0jIB02MADqCgnFgsRgyyrK4/PGLkrkcflT1Yh eHRB1VFBug+Rxydewf698Qy/iqpkCK/AWCM0wE2rrEAs8l5yRD4CKbZSUW9NFDmO 7PtyhdK1DPPUun7v0CXgGMR0ltPieHecbv9kfo4YM3ycsC4sN7kgs3Y3vzZq/Uj5 WHztg0O+lNANZiHufXuxxiRHoJK7CypZgYZUB1LgHAG225P7bfiiQSvZL4QuXjUl Y71tZz4OvaJ4nNVQSb1sHs0PfkhPHcs7YlHPo5yV7z93 -----END CERTIFICATE-----Generated at Mon Jan 26 10:53:22 2026 by rpki-client